CVE-2020-26555

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-26555
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

5.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 6.5 / Impact : 4.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://kb.cert.org/vuls/id/799380 Third Party Advisory US Government Resource
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/
https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:intel:ax210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ax210:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:intel:ax201_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ax201:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:intel:ax200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ax200:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:intel:ac_9560_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9560:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:intel:ac_9462_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9462:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:intel:ac_9461_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9461:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:intel:ac_9260_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9260:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:intel:ac_8265_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_8265:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:intel:ac_8260_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_8260:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:intel:ac_3168_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_3168:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:intel:ac_7265_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_7265:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:intel:ac_3165_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_3165:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:intel:killer_wi-fi_6e_ax1675_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6e_ax1675:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:intel:killer_wi-fi_6_ax1650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6_ax1650:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:intel:killer_ac_1550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_ac_1550:-:*:*:*:*:*:*:*
History

07 Nov 2023, 03:20

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/', 'name': 'FEDORA-2021-a35b44fd9f', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/ -

07 Oct 2022, 03:00

Type Values Removed Values Added
References (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html - (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html - Third Party Advisory
First Time Intel ac 7265
Intel killer Ac 1550
Intel ac 8265
Intel ax200 Firmware
Intel killer Ac 1550 Firmware
Intel ax210 Firmware
Intel ac 9462 Firmware
Intel ac 9560 Firmware
Intel killer Wi-fi 6 Ax1650
Intel ac 3168 Firmware
Intel killer Wi-fi 6e Ax1675 Firmware
Intel ac 8260 Firmware
Intel ac 7265 Firmware
Intel ac 9260 Firmware
Intel ac 9560
Intel ax201 Firmware
Intel ac 9461 Firmware
Intel ax210
Intel ac 3165
Intel ac 3168
Intel ac 9461
Intel killer Wi-fi 6e Ax1675
Intel ac 8260
Intel ac 9462
Intel ac 8265 Firmware
Intel ac 9260
Intel killer Wi-fi 6 Ax1650 Firmware
Intel ax201
Intel ax200
Intel ac 3165 Firmware
Intel
CPE cpe:2.3:h:intel:ax210:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6_ax1650:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_wi-fi_6e_ax1675:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:killer_wi-fi_6_ax1650_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ax201:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_3165_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_8265:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ax210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ax200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_3168:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:killer_ac_1550_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_9260_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_7265_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_9461_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_7265:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:killer_wi-fi_6e_ax1675_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_9462_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ax200:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9560:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_8265_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9260:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9461:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_9560_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_9462:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_3165:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ac_8260:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_3168_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ac_8260_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:killer_ac_1550:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ax201_firmware:-:*:*:*:*:*:*:*

08 Jun 2021, 18:15

Type Values Removed Values Added
References
  • (CONFIRM) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html -

02 Jun 2021, 15:20

Type Values Removed Values Added
CWE CWE-863
CPE cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : 4.8
v3 : 5.4
References (MISC) https://kb.cert.org/vuls/id/799380 - (MISC) https://kb.cert.org/vuls/id/799380 - Third Party Advisory, US Government Resource
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/ - Mailing List, Third Party Advisory
References (MISC) https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - (MISC) https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - Vendor Advisory

28 May 2021, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/ -

24 May 2021, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2021-05-24 18:15

Updated : 2023-12-10 13:55

NVD link : CVE-2020-26555

Mitre link : CVE-2020-26555

CVE.ORG link : CVE-2020-26555

JSON object : View

Products Affected

intel

  • ac_7265
  • killer_wi-fi_6e_ax1675
  • ac_9461
  • ac_9462
  • ax200
  • ac_9560_firmware
  • ac_3165
  • killer_wi-fi_6_ax1650
  • killer_ac_1550
  • ac_3168_firmware
  • killer_wi-fi_6e_ax1675_firmware
  • ac_9560
  • ac_9461_firmware
  • ac_3168
  • ac_8260_firmware
  • ac_9462_firmware
  • ac_9260_firmware
  • ac_3165_firmware
  • ac_8265
  • ax201
  • ac_8265_firmware
  • ac_8260
  • ac_7265_firmware
  • killer_wi-fi_6_ax1650_firmware
  • ax210_firmware
  • killer_ac_1550_firmware
  • ax210
  • ax200_firmware
  • ax201_firmware
  • ac_9260

fedoraproject

  • fedora

bluetooth

  • bluetooth_core_specification
CWE
CWE-863

Incorrect Authorization